General
- Target 2026-08-03_9d0030452201b4453d1e6cf529442191_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 225KB
- Sample260803-cvefvaaq2x
- SHA256 238a39c75ddc870bec64d066c445079f6c4b026cc7c9ce5e8035c6db244b65e0
- MD5 9d0030452201b4453d1e6cf529442191
- SHA1 a76b9b71cbcd477fb58c626bdce16c73cb4ad737
- SHA512 d6598d9d25ea4aee9784a031853f323f25ac96d16db197257d9a8e14bb236275056dd9437a8a7688d4eec47d89c8730a59ba62d1cd61cbf30e5925ed3af4e92f
- SSDEEP 3072:E6GEtNEXN4wCq5/v46QC2mCm/lY9Kkj3c6QQaWAk0Ag5qAWKGETBKnF58it3kzMx:hGYk4wCq5x+9T3bQQaNlTwNt3kz
- TLSH T1E13459217C81C032C1B31934C9E5D2F06A7CBD708E658A8F63987F2F7A771926625E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-03_9d0030452201b4453d1e6cf529442191_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-08-03_9d0030452201b4453d1e6cf529442191_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 2026-08-03_9d0030452201b4453d1e6cf529442191_coinminer_elex_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 225KB
- SHA256 238a39c75ddc870bec64d066c445079f6c4b026cc7c9ce5e8035c6db244b65e0
- MD5 9d0030452201b4453d1e6cf529442191
- SHA1 a76b9b71cbcd477fb58c626bdce16c73cb4ad737
- SHA512 d6598d9d25ea4aee9784a031853f323f25ac96d16db197257d9a8e14bb236275056dd9437a8a7688d4eec47d89c8730a59ba62d1cd61cbf30e5925ed3af4e92f
- SSDEEP 3072:E6GEtNEXN4wCq5/v46QC2mCm/lY9Kkj3c6QQaWAk0Ag5qAWKGETBKnF58it3kzMx:hGYk4wCq5x+9T3bQQaNlTwNt3kz
- TLSH T1E13459217C81C032C1B31934C9E5D2F06A7CBD708E658A8F63987F2F7A771926625E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1